WordPress security by component

WPExperts Square For GiveWP

Plugin description

WPExperts Square For GiveWP is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Feb 21, 2025; the highest CVE/CNA score is 8.5.

Plugin slug: wpexperts-square-for-give

Latest vulnerability

CVE-2024-13713: WPExperts Square For GiveWP: SQL injection

WPExperts Square For GiveWP is affected by SQL injection. Exploitation requires at least subscriber-level access. A successful request can alter database queries and expose or modify WordPress data.

PublishedFeb 21, 2025

Safe version guidanceSee mitigation notes

		Safe version
Feb 21, 2025	CVE-2024-13713 WPExperts Square For GiveWP: SQL injection WPExperts Square For GiveWP is affected by SQL injection. Exploitation requires at least subscriber-level access. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE6.5 NVD6.5
Oct 06, 2024	CVE-2024-47338 WPExperts Square For GiveWP: SQL injection WPExperts Square For GiveWP is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE8.5 NVDPending